IntenseWebs/nginx
3
0 Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-10-24 22:57:43 -05:00
Code Issues Packages Projects Releases Wiki Activity

Restrict duplicate TE headers in HTTP/2 and HTTP/3

Browse Source 
Following d3a76322cf, this change rejects requests which have multiple
TE headers.

Reported-by: geeknik <geeknik@protonmail.ch>
This commit is contained in:
Roman Arutyunyan authored and Roman Arutyunyan committed 2026-04-16 19:47:03 +04:00
1 parent ff8221b4db
commit 4e89ce224f
2 files changed
+4 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/http/v2/ngx_http_v2.c
+2 -1
View File
@@ -3849,7 +3849,8 @@ ngx_http_v2_run_request(ngx_http_request_t *r)
}
if (r->headers_in.te
&& (r->headers_in.te->value.len != 8
&& (r->headers_in.te->next
|| r->headers_in.te->value.len != 8
|| ngx_strncasecmp(r->headers_in.te->value.data,
(u_char *) "trailers", 8) != 0))
{
src/http/v3/ngx_http_v3_request.c
+2 -1
View File
@@ -1050,7 +1050,8 @@ ngx_http_v3_process_request_header(ngx_http_request_t *r)
}
if (r->headers_in.te
&& (r->headers_in.te->value.len != 8
&& (r->headers_in.te->next
|| r->headers_in.te->value.len != 8
|| ngx_strncasecmp(r->headers_in.te->value.data,
(u_char *) "trailers", 8) != 0))
{